Postuler

Publié il y a 8 mois

Security Engineer

@ Querentia Inc.

Toronto, Ontario

Contrat5+ ans d’expérience
Postuler
SIGNAUX

En bref

Querentia Inc. is hiring a contract Security Engineer (DevSecOps / Cloud) to support a Government of Canada client in delivering secure cloud-based applications. The work covers CI/CD security, automated scanning controls and Security Assessment & Authorization (SA&A) activities, on a remote, full-time exclusive 6-month contract at 37.5 hours per week, with a mandatory Secret or Top-Secret clearance.

Responsabilités :

  • Design and implement secure CI/CD pipelines with integrated security controls
  • Deploy and manage automated security scanning tools (SAST, DAST, SCA, container security)
  • Lead and support SA&A activities for cloud-based applications
  • Ensure compliance with Government of Canada security frameworks and standards
  • Identify and remediate application and infrastructure vulnerabilities

Résumé des exigences :

  • Bachelor's degree or College Diploma in a relevant discipline
  • 5+ years in a software development or engineering environment
  • Two SA&A completions for cloud applications within the last 5 years (GOC experience required)
  • 2+ years implementing automated security scanning within CI/CD pipelines
  • Active Secret or Top-Secret clearance (mandatory)

Outils et compétences

Source et dates

Type de source non vérifié · jsonld

Date publiée par l’employeur
2026-03-25
Première détection par notre source
2026-10-26
Mise à jour du dossier source
2026-11-02

Ces dates décrivent le dossier source, pas une vérification en direct du recrutement. Consultez l’offre originale.

Détails du poste

NiveauSenior
DomaineDéveloppement logiciel
Expérience5 an(s) et plus
Heures par semaine37.5
Déplacementsavion : aucun · route : aucun
Milieu de travailDomicile
PositionSurtout assis
Exigences physiquesphysique faible · ordinateur élevé
LanguesEnglish
Permis et certificationsSecret clearance, Top Secret clearance
FormationBaccalauréat (exigé), Collégial (DEC) (exigé)
Domaines d’étudesComputer Science, Information Technology, Engineering
Cote de sécuritéSecret

Résumé et détails rédigés par l’IA à partir de l’offre; l’offre de l’employeur fait foi.

ChampValeur
Offres sur Jobsy331
Description

Job Title: Security Engineer (DevSecOps / Cloud)

Location: Remote

Duration: 6-Month Contract (Full-Time – 37.5 hours/week, Exclusive)

Clearance: Secret or Top-Secret (Mandatory)

Role Overview

We are seeking a skilled Security Engineer to support a Government of Canada (GOC) client in delivering secure cloud-based applications. This role focuses on embedding security into the software development lifecycle, with a strong emphasis on CI/CD security, automated controls, and compliance with federal security standards.

The ideal candidate will have hands-on experience with Security Assessment & Authorization (SA&A) processes within the GOC environment and a strong background in DevSecOps practices.

Key Responsibilities

• Design and implement secure CI/CD pipelines with integrated security controls

• Deploy and manage automated security scanning tools (SAST, DAST, SCA, container security, etc.)

• Lead and support Security Assessment & Authorization (SA&A) activities for cloud-based applications

• Ensure compliance with Government of Canada security frameworks, policies, and standards

• Identify, assess, and remediate application and infrastructure vulnerabilities

• Apply modern security engineering practices across the SDLC

• Collaborate with development and DevOps teams to embed DevSecOps best practices

• Support threat modeling, risk assessments, and security reviews for new and existing systems

Mandatory Requirements

• Bachelor ’ s degree or College Diploma in a relevant discipline

• Minimum 5+ years of experience in a software development / engineering environment

• Strong hands-on experience with CI/CD pipelines and DevSecOps practices

• Proven experience completing Security Assessment & Authorization (SA&A) for at least two (2) cloud-based applications within the last 5 years ( GOC experience required )

• Minimum 2+ years of recent experience implementing automated security scanning and controls within CI/CD pipelines

• Experience applying modern application security principles to applications released within the past 3 years

• Active Secret or Top-Secret Clearance (Mandatory)

Additional Requirements

• Prior experience working within Government of Canada (GOC) environments

• Strong knowledge of cloud security, risk management, and compliance frameworks

• Ability to commit to a full-time (37.5 hours/week), exclusive contract

• Strong communication and stakeholder collaboration skills

Nice to Have

• Certifications such as CISSP, CISM, CEH, AWS/Azure Security

• Experience with Infrastructure as Code (IaC) and secure configuration management

• Familiarity with containerization and Kubernetes security

• Experience with security tools like SonarQube, Snyk, Checkmarx, Prisma Cloud , etc.

Emplois semblables

  • Security Engineer - Product Security

    Toronto, ON
    Télétravail

    Spotify

    Candidates need software engineering experience, ideally in security or developer experience, and the ability to write code in Java, Python, Scala, C++ or TypeScript. Experience with agentic AI systems and an understanding of common security risks are also required.

    Research, Security threats, Oracle Java, Python, Scala, C++

  • Senior Security Engineer (Palo Alto)

    Mississauga, ON

    goeasy: is a Canadian company, headquartered in Mississauga, Ontario, that provides non-prime leasing and lending services through its easyhome,…

    5+ ansCandidates need five or more years of network security engineering experience, a bachelor's degree in IT, cybersecurity or a related field, and hands-on work with Palo Alto Networks, Cloudflare and Netskope. Strong judgement, communication skills and knowledge of Canadian privacy rules are also needed.

    Palo Alto Networks NGFW, Cloudflare WAF, Netskope, Veracode, Tenable, Microsoft Azure

  • Security Engineer / Architect

    Mississauga, ON
    Temps plein

    Chartwell

    6+ ansCandidates need at least six years of hands-on security engineering or cloud infrastructure experience, plus practical work with Active Directory, ADFS, MFA, Conditional Access, and Microsoft 365. A post-secondary degree or diploma in a technical field and strong written and verbal communication are also required.

    Active Directory, ADFS, Microsoft 365, Microsoft Purview, Cisco Umbrella, Cisco Secure Access

  • Senior Security Engineer

    Toronto, ON

    Dye & Durham Corporation: Dye & Durham Limited provides premiere practice management solutions empowering legal professionals every day, delivers vital data insights to…

    7+ ansCandidates need 7+ years of cybersecurity experience, scripting skills in Python, PowerShell or Bash, and knowledge of frameworks such as NIST CSF, SOC 2, ISO 27001 and GDPR. Security certifications such as CEH, OSCP or GCIA are preferred.

    EDR, firewall, IDS/IPS, DLP, Python, PowerShell

  • Security Engineer (Ethical Hacker)

    Toronto, ON

    8B Education Investments

    6+ ansCandidates need 6-10 years of information security experience, at least 4 years building a compliance program, and experience working across departments. Ethical hacking experience, a computer science-related bachelor's degree, and programming skills are assets.

    SIEM, MS365 E5

  • Security Engineer

    Toronto, ON
    TélétravailContrat

    Querentia Inc.

    Candidates are asked to apply to connect with Querentia Inc.'s recruitment team about this role.

  • Security Engineer

    Toronto, ON
    TélétravailTemps plein

    Poseidon

    Candidates need professional experience in cloud or IT security, practical AWS security knowledge, and experience operating endpoint detection and device-management tools. Strong scripting or automation skills, clear English communication and sound judgment under pressure are also required.

    AWS, Google Cloud, CrowdStrike, Jamf, Google Workspace

  • Security Engineer

    Toronto, ON
    Temps plein

    Varicent

    5+ ansVaricent needs candidates with 5+ years in information security or security engineering, at least one security certification such as CISSP or CISA, and hands-on experience with cloud platforms and security tools like SIEM, WAF, DLP and EDR. Strong communication skills and the ability to make sound decisions with incomplete information are also required.

    SIEM, EDR, WAF, DLP, CASB, OneTrust

Lieux et modes de travail

Lieux

Tout le CanadaTélétravail · Hybride · Sur place · Sur le terrain

Astuce : ajoutez le télétravail pour élargir la recherche.

Exclure des lieux

Mode de travail

Offres de cette entreprise dans les résultats

Voici les offres de cette entreprise chargées dans votre recherche. Elle peut avoir d’autres postes ouverts.